Caddy reverse_proxy + x-forwarded-for Headers

[francislavoie]

@wiseguy1394

           @cloudflare header CF-Connecting-IP *

           request_header @cloudflare X-Forwarded-For {header.CF-Connecting-IP}
           request_header !@cloudflare X-Forwarded-For {header.Remote-Address}

You don’t need any of this stuff. Caddy handles the XFF header automatically for you when trusted_proxies is properly configured. Since you’re fronting with Cloudflare, you should use the client_ip_headers option to tell Caddy to read from Cf-Connecting-Ip when trusted. See Global options (Caddyfile) — Caddy Documentation. Also, you can simplify your IP list by using the GitHub - WeidiDeng/caddy-cloudflare-ip plugin instead of listing them all out.

@wiseguy1394

                   header_up Host http-service 
                   header_up X-Forwarded-For {header.X-Forwarded-For}
                   header_up X-Forwarded-Host www.bibleserver.com
                   header_up X-Forwarded-Proto https
                   header_up X-Forwarded-Port 443

Remove all this stuff. Caddy already handles those headers for you. See reverse_proxy (Caddyfile directive) — Caddy Documentation